adding devise security extensions - so be it :imp: